Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.graphql-java/graphql-java@17.5
purl pkg:maven/com.graphql-java/graphql-java@17.5
Next non-vulnerable version 19.11
Latest non-vulnerable version 21.5
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-a88m-weu1-ebfs
Aliases:
CVE-2024-40094
GHSA-h9mq-f6q5-6c8m
19.11
Affected by 0 other vulnerabilities.
20.9
Affected by 0 other vulnerabilities.
21.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-m121-a6nq-cbc6 GraphQL Java vulnerable to stack consumption In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4 and 17.5. CVE-2023-28867
GHSA-p4qx-6w5p-4rj2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T08:11:08.683054+00:00 GitLab Importer Affected by VCID-a88m-weu1-ebfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2024-40094.yml 38.6.0
2026-05-31T21:35:29.433962+00:00 GHSA Importer Fixing VCID-m121-a6nq-cbc6 https://github.com/advisories/GHSA-p4qx-6w5p-4rj2 38.6.0
2026-05-31T11:07:02.687378+00:00 GithubOSV Importer Fixing VCID-m121-a6nq-cbc6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/03/GHSA-p4qx-6w5p-4rj2/GHSA-p4qx-6w5p-4rj2.json 38.6.0
2026-05-30T21:00:08.722905+00:00 GitLab Importer Fixing VCID-m121-a6nq-cbc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2023-28867.yml 38.6.0